CVE-2025-71264 — Out-of-bounds Read in Mumble

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 85.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MumbleDebian Mumble
Timeline
PublishedMar 16

Description

Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶NVDmumble/mumble< 1.6.870
▶debiandebian/mumble< mumble 1.5.735-7 (forky)
▶Debianmumble/mumble< 1.5.735-7

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r4p8-phpj-5pvw: Mumble before 1↗2026-03-16
▶
OSV
CVE-2025-71264: Mumble before 1↗2026-03-16
▶

📋Vendor Advisories

1
Debian
CVE-2025-71264: mumble - Mumble before 1.6.870 is prone to an out-of-bounds array access, which may resul...↗2025
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-71264 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-71264 — Out-of-bounds Read in Mumble | cvebase